$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: +LPDkJwA2a+XEyZqS3+Lr/rgTBZshkOZZ5LKoBRxnpg= Subject key identifier: AF:52:3B:05:B8:2B:FB:2D:3B:31:39:3C:98:09:BF:E5:FD:A0:97:53 Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 023A Signing time: Sun 19 Oct 2025 04:14:53 +0000 Manifest this update: Sun 19 Oct 2025 04:14:52 +0000 Manifest next update: Sun 26 Oct 2025 04:14:52 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: A416aOPmNqlko6UqeRGl51n7hMUJssBUJJ2UiUlrx8k=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Oct 19 04:14:52 2025 GMT Not After : Oct 26 04:14:52 2025 GMT Subject: CN=68f465bd-0273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:20:55:32:e1:26:d7:e3:52:75:81:0e:4d: 14:32:ef:e0:e7:c3:b0:a7:7f:35:6d:b0:4a:b1:70: 7f:f2:c8:fc:89:36:07:ee:08:37:10:1e:05:ac:9f: 8f:15:4a:fd:4c:9c:94:c7:fa:48:10:dd:70:66:1c: 46:4e:c6:47:0a:54:e3:68:e1:b1:19:36:b4:ab:3b: 23:82:28:4a:de:6b:23:44:21:a6:28:08:0a:45:b5: bd:2d:18:33:09:35:f0:1b:b9:42:c9:9c:9b:ee:48: c2:fe:9d:7b:be:a4:22:ab:79:bc:61:ac:a4:ba:dc: 5d:f4:7f:71:4c:8c:82:00:56:fc:15:fa:37:6f:2e: 0d:69:43:e7:2c:3a:1d:1a:af:f3:f7:69:c0:cb:71: f9:7a:0e:62:aa:d1:fb:ef:ca:fd:47:26:24:db:30: 7f:d1:50:54:13:63:c2:23:2a:9f:f9:ec:fc:f4:4a: f4:42:b0:1c:49:2a:4b:a6:80:ca:a7:41:02:53:4a: 27:ce:04:1e:f3:84:a0:64:f9:78:dd:7a:41:bc:db: 7f:10:38:19:ca:fb:cb:be:1e:de:59:6c:0d:5e:49: 98:e7:1a:ac:e9:9c:c1:e9:c6:cc:b6:ac:43:a0:4e: 6a:19:68:5c:bf:1b:cd:b3:a4:c2:58:16:61:e4:0b: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:3B:05:B8:2B:FB:2D:3B:31:39:3C:98:09:BF:E5:FD:A0:97:53 X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:2f:67:bd:ab:1f:4f:9a:8f:19:9f:48:69:3f:2b:f9:74:dd: 8f:bb:6a:f4:c5:c2:29:f0:a2:28:97:6e:8e:69:2a:73:43:7d: bd:c7:ed:1c:b5:c9:17:50:d9:1f:55:95:2d:ff:c3:96:27:94: 39:30:16:61:3a:9d:c1:8b:62:69:a2:f0:f7:d6:02:12:56:b1: 85:3b:ff:27:70:11:e3:95:7e:25:2c:de:d1:d3:bf:4d:b4:b5: 3f:b2:d8:b3:8f:98:7b:33:d7:9a:f6:96:2b:67:93:46:3b:a2: af:31:12:6b:22:1a:62:bc:df:8e:62:15:e4:10:e8:80:86:b4: 3a:99:49:c2:a5:06:a7:76:67:ce:e1:a1:76:0a:f5:48:85:18: b0:9b:28:e6:a1:6a:f6:7a:07:22:89:24:f1:cb:cc:91:c4:f5: bf:7c:5a:5c:0b:23:04:c7:b2:2f:b0:e6:f2:0b:7f:fe:75:b4: 4a:fa:4e:b5:b7:94:40:f6:17:b8:db:9b:5c:19:55:0f:b0:4d: cd:4a:e2:ff:78:c1:2e:d4:a2:f6:bd:d8:73:f9:c1:a8:25:b0: 37:d0:6a:5a:9d:03:c9:6d:f1:73:ed:fe:2e:d7:a3:9f:ab:88: 1a:2b:fd:26:36:b4:d9:f1:8b:6f:bd:d7:32:3d:77:2f:cb:ea: 05:4c:8a:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUxMDE5MDQxNDUyWhcNMjUxMDI2MDQxNDUyWjAYMRYwFAYD VQQDEw02OGY0NjViZC0wMjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMQgVTLhJtfjUnWBDk0UMu/g58Owp381bbBKsXB/8sj8iTYH7gg3EB4FrJ+P FUr9TJyUx/pIEN1wZhxGTsZHClTjaOGxGTa0qzsjgihK3msjRCGmKAgKRbW9LRgz CTXwG7lCyZyb7kjC/p17vqQiq3m8Yaykutxd9H9xTIyCAFb8Ffo3by4NaUPnLDod Gq/z92nAy3H5eg5iqtH778r9RyYk2zB/0VBUE2PCIyqf+ez89Er0QrAcSSpLpoDK p0ECU0onzgQe84SgZPl43XpBvNt/EDgZyvvLvh7eWWwNXkmY5xqs6ZzB6cbMtqxD oE5qGWhcvxvNs6TCWBZh5AuaRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9SOwW4 K/stOzE5PJgJv+X9oJdTMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBL2e9qx9Pmo8Zn0hpPyv5dN2Pu2r0xcIp8KIol26OaSpzQ329x+0c tckXUNkfVZUt/8OWJ5Q5MBZhOp3Bi2JpovD31gISVrGFO/8ncBHjlX4lLN7R079N tLU/stizj5h7M9ea9pYrZ5NGO6KvMRJrIhpivN+OYhXkEOiAhrQ6mUnCpQandmfO 4aF2CvVIhRiwmyjmoWr2egciiSTxy8yRxPW/fFpcCyMEx7IvsObyC3/+dbRK+k61 t5RA9he425tcGVUPsE3NSuL/eMEu1KL2vdhz+cGoJbA30GpanQPJbfFz7f4u16Of q4gaK/0mNrTZ8YtvvdcyPXcvy+oFTIrS -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:46 2025 by rpki-client